Re : Auditing Read/Write of Large Files
Hello, I'm afraid the requested feature is currently not available in ADAudit Plus. We have raised this to our development team so that the feature would be implemented depending on its feasibility. We...
View ArticleRe : Folder Deletion on NetApp CIFS Share Report
Thanks Bruce. We have very bust CIFS setup with lots of changes hourly. This results in a lot of audit data. At times, you might get a call form a user that has deleted a lot of folders in error (i...
View ArticleRe : TLS Issue collecting from NetApp Filer
I assume that this API is AuditPlus issuing a CIFS audit.save command to force NetApp to dump the .alf to .evtx? This appears to be failing as the AuditPlus software cannot establish an SSLv3...
View ArticleRe : Auditing Read/Write of Large Files
I can't see how this product could do this. It is basically collecting audit logs form the filer and this data is not contained therein. In theory, it could respond to the detection of a file creation...
View ArticleArchiving with a MS SQL Server DB
We have a large amount of audit data (1 week might result in 100 GB of live SQL data). We archive everything every 7 days. However, this seems to archive everything out to .zip files and remove it form...
View ArticleRe : No "accessed by" or "created by" details on some (not all) files
Same problem here on my NetApp filers. All SACLS/DACLS in place. Daily reports show '-' for some or all files. Major flaw in an auditing product in my opinion. if you cant report on who created a file...
View ArticleRe : Auditing Read/Write of Large Files
Thanks shocko for the suggestions; I will look into those.
View ArticleRe : WARNING: ADAudit Plus only audits KERBEROS authentication events. It...
Hello, We are strongly committed to the goal of "Quality assured" service and always strive for it's perfection. We guarantee a prompt implementation of above discussed feature that would allow us to...
View ArticleRe : No "accessed by" or "created by" details on some (not all) files
Hello, Please perform below procedure to implement an alternate method to track "File Creation " activity in ADAudit Plus. 1. Login to ADAudit Plus and go to http://localhost:Port_number/runQuery.do...
View ArticleRe : Archiving with a MS SQL Server DB
Hello, In ADAudit Plus, "Archiving" has been a good feature for effective disk management without data loss. We will work on certain factors that have to be considered to implement the concept of "Data...
View ArticleRe : TLS Issue collecting from NetApp Filer
Hello, We would like to explain the actual event processing in NetAPP filer by ADAudit Plus. As you'd explored, ADAudit Plus creates an .evt file at every event fetch interval, however it depends on...
View ArticleRe : Folder Deletion on NetApp CIFS Share Report
Hi, Please follow below steps to obtain any available report based on specific file or folder filtered through its UNC path. 1. Under File Audit, click on "Share based Reports " 2. Go to any desired...
View ArticleRe : WARNING: ADAudit Plus only audits KERBEROS authentication events. It...
That would be great Bruce. Can you answer the question regarding the logon type collected for Kerberos logon also?
View ArticleRe : Folder Deletion on NetApp CIFS Share Report
Hi Bruce, I am aware of that method but again, I find it cumbersome. I wish to run a report simply on all folders deleted (regardless of the share). I do think it's a weakness that there is no canned...
View ArticleRe : Archiving with a MS SQL Server DB
That would be great. Archiving out to filer works great to keep the DB size under control but again, from an Auditing perspective, data can be archived out to file yet you an still select a data beyond...
View ArticleRe : WARNING: ADAudit Plus only audits KERBEROS authentication events. It...
Confirmation from support. Out of the box, only the following Kerberos logon types are collected: 2 Interactive Logon 10 Remote Interactive Logon
View ArticleRe : WARNING: ADAudit Plus only audits KERBEROS authentication events. It...
Hello, ADAudit Plus collects the following logon types from configured machines (DCs/Member Servers/Workstations). * 2 - Interactive Logon * 3 - Network Logon (On demand) * 5 -...
View ArticleRe : WARNING: ADAudit Plus only audits KERBEROS authentication events. It...
So support are incorrect? :)
View ArticleRe : WARNING: ADAudit Plus only audits KERBEROS authentication events. It...
Logon history only seem to apply for local logons so in a Domain, it only appears to report on actual logons to the domain controller serer itself.
View Article